TpMeCMS 路径遍历漏洞

TpMeCMS is a CMS based on the FastAdmin framework developed by Xiaohe, an individual developer. A path traversal vulnerability exists in TpMeCMS 1.3.3.1 and earlier versions, which stems from the parameter lang in the file /index/ajax/lang that causes path traversal...

The vulnerability of the /index/ajax/lang component of the FastAdmin remote administration utility, which allows a hacker to expose protected information.

The vulnerability of the /index/ajax/lang component of the FastAdmin remote administration utility is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information...